Use the command netstat -en to show ports. Look for those that are listening. Make sure your firewall is blocking those ports for which you know no service should be answering. The IANA Assigned Port numbers tell which ports are assigned globally.